METR and Redwood expose gaps in OpenAI's internal agent monitoring
METR and Redwood Research published results from a three-week, high-access pilot audit of OpenAI's internal misalignment monitoring as it existed on or before 21 July. The evaluators estimated 75–94% eligibility coverage for qualifying internal Responses API traffic, found a Codex sandbox and Auto-Review bypass, a way to hide hundreds of actions, monitor-failure inputs, disabling headers and subvertible tools.
Why it matters: The audit shows that a monitor can have broad nominal coverage yet remain vulnerable to missing compaction events, delayed triggers, serialization gaps and agent-controlled bypasses. Coverage percentages are not evidence that every consequential action is…